
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa
File: 4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa (raw, json)
Hash identifier: iZmAYD1NKl2IFo4z86EPWoXfPDI5yjplCfKAUOdA3BY=
Subject key identifier: 7D:19:72:6A:BD:03:3A:F0:2A:EC:49:4F:DD:4D:19:AE:76:D2:38:E3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E0142DA8D216681A8A5600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 184.21.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:14:2d:a8:d2:16:68:1a:8a:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=712b1df5-668f-4784-a9f7-9ebe2fdcc0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:38:03:4a:49:91:bc:12:f4:4e:b0:90:b6:
14:58:07:f9:8b:ae:e1:cb:9b:e8:d4:df:bf:ca:1d:
a0:c0:a9:45:62:11:2a:65:90:48:54:39:db:42:41:
cd:8a:c5:7f:b7:ff:16:8a:4f:9e:14:7b:ff:4c:8c:
b6:fe:6b:da:47:99:e9:72:a6:37:6f:a7:b0:b3:b9:
1b:85:11:da:69:57:b2:d8:24:76:69:c1:19:b9:7a:
68:56:64:49:ba:56:24:2f:e2:a9:6f:b5:3a:13:6d:
8b:17:21:4b:98:6c:a9:cb:da:3a:66:50:87:50:ac:
9b:35:69:91:88:25:97:04:d6:5f:a9:9c:b2:52:57:
a1:2a:9b:43:f9:e2:18:2c:f4:2b:ab:5a:15:02:17:
c7:32:d0:3b:fc:c5:a7:3e:3f:07:86:37:16:4c:bd:
35:bc:d1:5a:7f:8e:6f:48:11:9e:a8:86:e9:c3:3a:
b3:4b:ba:08:45:7a:5a:ad:7b:af:20:04:8c:fc:21:
1f:1e:c8:0a:de:2e:2b:6e:ff:52:ff:27:b3:4c:9a:
6e:63:97:36:32:33:84:5f:d9:f1:22:3a:a1:85:09:
39:52:8a:e0:0a:8b:e6:a6:be:00:f0:06:25:81:8c:
82:07:07:31:f1:59:17:ad:9c:0b:cc:89:ff:ad:cc:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:72:6A:BD:03:3A:F0:2A:EC:49:4F:DD:4D:19:AE:76:D2:38:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:b3:c3:9d:90:59:d9:03:c6:60:5e:4f:b6:40:6c:b9:0c:7f:
d0:1c:c1:00:7c:78:89:e0:6e:b6:fd:29:ac:1b:00:19:44:1b:
a2:d2:3b:26:d9:3b:51:85:5b:06:af:d2:d5:a6:2a:5b:05:86:
84:80:fc:1f:3b:5c:2e:89:1c:80:9c:c7:5a:f3:1b:5c:ce:03:
21:a1:38:de:ab:90:0f:c4:25:a8:a7:d3:bd:62:f2:b0:41:5f:
8f:9b:52:a9:b2:e2:01:36:ee:13:b6:8d:0c:bf:70:a5:a4:f2:
bc:93:2d:03:b8:e5:14:37:66:7c:a2:29:ae:e5:d7:51:35:68:
52:6e:f6:c5:f7:a0:53:47:af:72:3e:60:95:19:a3:f7:e8:90:
e2:4b:e9:69:6e:b5:d6:c1:14:cd:c5:2b:e9:ae:80:9c:ec:a6:
63:5e:5e:12:3b:a7:72:06:1e:55:dd:90:32:e9:40:12:09:35:
1a:9a:26:0e:f4:73:c3:d8:51:31:c1:96:34:d5:5a:12:a1:39:
77:c1:3d:77:e6:c2:eb:bb:ac:13:25:0a:21:1d:92:dc:b2:01:
d1:1a:da:4a:5d:2c:d1:56:53:9b:e0:4b:c7:88:31:d6:fc:d0:
f1:01:4d:4f:45:af:a3:5a:5e:71:c7:96:3d:d7:f0:a2:04:fd:
28:9b:fe:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BQtqNIWaBqKVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NzEyYjFkZjUtNjY4Zi00Nzg0LWE5ZjctOWViZTJmZGNjMGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9A4A0pJkbwS9E6wkLYUWAf5i67hy5vo1N+/
yh2gwKlFYhEqZZBIVDnbQkHNisV/t/8Wik+eFHv/TIy2/mvaR5npcqY3b6ews7kb
hRHaaVey2CR2acEZuXpoVmRJulYkL+Kpb7U6E22LFyFLmGypy9o6ZlCHUKybNWmR
iCWXBNZfqZyyUlehKptD+eIYLPQrq1oVAhfHMtA7/MWnPj8HhjcWTL01vNFaf45v
SBGeqIbpwzqzS7oIRXparXuvIASM/CEfHsgK3i4rbv9S/yezTJpuY5c2MjOEX9nx
IjqhhQk5UorgCovmpr4A8AYlgYyCBwcx8VkXrZwLzIn/rcxthwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0Zcmq9AzrwKuxJT91NGa520jjjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGM1NzEwYTItOWU3YS0z
ZGUxLTg3NmEtOGJlNGFhMjhkYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCzw52QWdkDxmBeT7ZAbLkMf9AcwQB8eIngbrb9KawbABlEG6LSOybZ
O1GFWwav0tWmKlsFhoSA/B87XC6JHICcx1rzG1zOAyGhON6rkA/EJain071i8rBB
X4+bUqmy4gE27hO2jQy/cKWk8ryTLQO45RQ3ZnyiKa7l11E1aFJu9sX3oFNHr3I+
YJUZo/fokOJL6WlutdbBFM3FK+mugJzspmNeXhI7p3IGHlXdkDLpQBIJNRqaJg70
c8PYUTHBljTVWhKhOXfBPXfmwuu7rBMlCiEdktyyAdEa2kpdLNFWU5vgS8eIMdb8
0PEBTU9Fr6NaXnHHlj3X8KIE/Sib/lU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:18 2026 by rpki-client